ISO/IEC INTERNATIONAL STANDARD 9798-5 Third edition 2009-12-15 Information technology Security techniques Entity authentication : Part 5: Mechanisms using zero-knowledge techniques Technologies de I'information Techniques de sécurité - Authentification d'entite Partie 5: Mecanismes utilisant des techniques a divulgation nulle Reference number ISO/IEC 9798-5:2009(E) IEC @ ISO/IEC 2009 Copyright International Organization for Standardization ISO/IEC 9798-5:2009(E) PDF disclaimer This PDF file may contain embedded typefaces. In accordance with Adobe's licensing policy, this file may be printed or viewed but shall not be edited unless the typefaces which are embedded are licensed to and installed on the computer performing the editing. In accepts no liability in this area. Adobe is a trademark of Adobe Systems Incorporated. Details of the software products used to create this PDF file can be found in the General Info relative to the file; the PDF-creation parameters were optimized for printing. Every care has been taken to ensure that the file is suitable for use by IsO member bodies. In the unlikely event that a problem relating to it is found, please inform the Central Secretariat at the address given below COPYRIGHT PROTECTED DOCUMENT @ISO/IEC 2009 All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and microfilm, without permission in writing from either isO at the address below or Iso's member body in the country of the requester. ISO copyright office Case postale 56 · CH-1211 Geneva 20 Tel. + 41 22 749 01 11 Fax + 41 22 749 09 47 E-mail copyright@iso.org Web www.iso.org Published in Switzerland @ ISO/IEC 2009 -All rights reserved Copyright International Organization for Standardization ISO/IEC 9798-5:2009(E) Contents Page Foreword Introductior 1 Scope 2 Terms and definitions . 3 Notation, symbols and abbreviated terms.. 4 Mechanisms based on identities . 4.1 Security requirements for the environment.. 4.2 Key production .. Unilateral authentication exchange..... 4.3 10 5 Mechanisms based on integer factorization..... 12 5.1 Security requirements for the environment.. 12 5.2 Key production .... 12 5.3 Unilateral authentication exchange... 13 6 Mechanisms based on discrete logarithms with respect to prime numbers 15 6.1 Security requirements for the environment.... 6.2 Key production .... 15 6.3 Unilateral authentication exchange.. 16 7 Mechanisms based on discrete logarithms with respect to composite numbers 7.1 Security requirements for the environment. 7.2 Key production ... ..18 7.3 Unilateral authentication exchange .. 19 8 Mechanisms based on asymmetric encryption systems . .20 8.1 Security requirements for the environment. 20 8.2 Unilateral authentication exchange .... 8.3 Mutual authentication exchange... 22 9 Mechanism based on discrete logarithms with respect to elliptic curves .. 23 9.1 Security requirements for the environment.... 23 9.2 Key production ...... .24 9.3 Unilateral authentication exchange.. Annex A (normative) Object identifiers ... Annex B (informative) Principles of zero-knowledge techniques.... Annex C (informative) Guidance on parameter choice and comparison of the mechanisms ... Annex D (informative) Numerical examples .. Bibliography. ii Copyright International Organizationforstandardization All rights reserved